Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/xVg_gWgn2TTCMoUT6TbbKI0nj1g.roa
File:                     xVg_gWgn2TTCMoUT6TbbKI0nj1g.roa (raw, json)
Hash identifier:          0vgJIO9+h7c2mbSVzNPAZELxWF5+K01pByF8TcGC1nU=
Subject key identifier:   C5:58:3F:81:68:27:D9:34:C2:32:85:13:E9:36:DB:28:8D:27:8F:58
Certificate issuer:       /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial:       0186839A54BBAEA19C24507B2A46AD088B34
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/xVg_gWgn2TTCMoUT6TbbKI0nj1g.roa
Signing time:             Fri 24 Feb 2023 13:26:14 +0000
ROA not before:           Fri 24 Feb 2023 13:26:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34986
IP address blocks:        193.104.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:83:9a:54:bb:ae:a1:9c:24:50:7b:2a:46:ad:08:8b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
        Validity
            Not Before: Feb 24 13:26:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c5583f816827d934c2328513e936db288d278f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:7f:08:74:d8:a9:86:72:8d:09:9a:89:b1:79:
                    d4:3f:d9:c4:ff:ab:7d:44:26:cb:bc:f3:72:4c:de:
                    27:66:d8:01:c6:b8:6c:11:5c:95:2e:b4:49:8d:f4:
                    56:24:04:af:0d:95:dd:d7:28:03:39:7b:7c:1c:cb:
                    19:31:bf:dd:68:17:78:9e:77:0c:c4:44:42:35:60:
                    cd:e8:a8:3d:c4:51:c0:2a:8a:5a:4a:cf:1f:09:9d:
                    88:a5:c3:f5:16:26:5a:5f:98:e4:7a:50:d1:15:0b:
                    31:f2:84:04:b3:f8:a4:94:95:40:19:84:42:c3:89:
                    01:2c:f8:7e:f5:07:dc:59:08:92:a4:7c:27:4e:ee:
                    2f:3b:c3:6f:33:98:61:e6:d7:84:73:63:df:92:2d:
                    f7:bc:51:70:aa:41:dc:95:bc:d8:bd:89:03:65:9d:
                    9e:fc:fb:1a:9f:b8:b6:23:a1:ca:c3:7d:a8:a8:8c:
                    1a:22:9c:d9:94:33:8d:d7:cf:a7:f5:ce:71:1e:d2:
                    3b:17:cd:70:1c:07:83:06:8d:c5:22:b2:0a:ff:6a:
                    8a:64:f6:73:2d:06:e0:c8:32:e5:cc:b1:c2:6e:ce:
                    24:f3:58:f7:0a:37:7f:39:a6:d2:f6:6e:43:65:37:
                    15:7d:3e:dc:4d:5b:b7:8b:a4:e7:38:cb:6c:ae:0d:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:58:3F:81:68:27:D9:34:C2:32:85:13:E9:36:DB:28:8D:27:8F:58
            X509v3 Authority Key Identifier:
                keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/xVg_gWgn2TTCMoUT6TbbKI0nj1g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f4:21:99:26:b6:aa:38:a0:01:1a:d8:d9:5e:15:ff:42:34:
         1a:7e:3e:1e:6a:cf:b1:91:ef:06:3d:39:70:a4:ca:02:ac:18:
         e6:9c:2e:6f:6b:df:1d:bb:88:78:42:dc:43:7e:b8:ba:7d:a2:
         a6:b9:f9:f7:2d:12:84:18:92:6d:82:07:fb:2e:98:8e:57:76:
         43:d1:2f:b3:8b:94:5a:ac:85:81:21:aa:8f:0d:f2:eb:54:03:
         0f:0f:13:65:11:c2:81:68:81:ff:30:8d:b5:53:61:b7:09:2b:
         64:6e:52:36:02:4e:f5:6c:5d:48:64:69:ba:d3:3d:70:cf:fa:
         ec:c3:c1:a9:cb:02:b4:1c:d8:1b:d8:07:96:59:ee:4b:35:89:
         35:c9:e9:33:6d:dc:56:27:01:e1:7a:22:54:0a:e6:92:d5:05:
         cd:98:db:11:6f:9a:04:bf:bd:0c:e7:3d:5b:6e:b5:cf:f2:15:
         03:03:cc:e5:0b:c5:1b:d0:48:06:bd:78:04:82:ef:c4:9b:88:
         c7:97:fc:c8:f5:5c:dd:4f:8c:30:a1:00:83:d6:f2:39:53:55:
         cc:8b:b7:28:a0:d2:5c:1c:fb:af:2e:87:3f:f2:2b:e5:40:f7:
         1a:42:40:5d:1b:fa:4a:62:c3:3c:69:48:af:32:dc:db:4b:6d:
         9b:4d:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org